Description (CNA)
During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Device Configuration framework that allowed a privilege escalation, enabling a lower-privileged user to gain administrator privileges.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Axis Communications AB / AXIS OS | affected 12.0.0 before 12.4.0 |
CWE
CWE-269
References
ADP enrichment
No English description supplied.
No references supplied.